OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: ][-][UNTER (lophttutopia.com)
Date: Wed Feb 27 2002 - 04:00:39 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi Bugtraq !!

    BPM STUDIO PRO 4.2 is one of the most famous mp3 mixer and player and it has
    an http server implementation for manage the player via the web browser.

    Unfortunatly, when you perform a simple http request like:
    http://BPM-HOST/con/con
    you can crash instantly non-patched Win9x host with a simple Blue Screen !!

    HTTP daemon is not activated by default

    bye bye

    -----------------------------------------------
                   ][-][UNTER
    Infobyte Security Research Crew
           Buenos Aires, Argentina
    -----------------------------------------------